Ireland’s Data Protection Commission (DPC) has opened an inquiry into Shein to review the movement of European users' data to China, the regulator announced on Tuesday.
The investigation will scrutinize whether the Chinese online retailer's Dublin-based headquarters for Europe, the Middle East and Africa complied with the obligations set out in the General Data Protection Regulation (GDPR) in relation to those transfers, according to the commission's statement.
The move comes amid heightened attention from the DPC on cross-border data flows. Last year, the regulator imposed a fine of 05€530 million on TikTok over concerns about the protection of user information, and it ordered that the short-form video platform stop transferring data to China if the processing did not meet compliance standards.
Commenting on the inquiry, DPC Deputy Commissioner Graham Doyle said: "Recent regulatory action by the DPC, together with complaints to other European supervisory authorities, has brought data transfers to China, in particular, into focus." He added that the probe represents "an important strategic priority for the commission."
Context and scope
The inquiry will specifically evaluate the handling of personal data routed from European users to destinations in China and whether the processing activities by the EMEA headquarters in Dublin aligned with GDPR requirements for international transfers. The statement from the regulator framed the review as part of a broader emphasis on transfers to China that has emerged after recent regulatory measures and cross-border complaints.
Summary of key developments
- The DPC has launched a formal investigation into Shein concerning transfers of European user data to China.
- The inquiry will assess compliance with the GDPR by Shein's Dublin-based EMEA headquarters.
- The action follows prior DPC enforcement, including a 05€530 million fine against TikTok and an order tied to data transfers to China if processing was non-compliant.
Implications and limitations
The announcement indicates intensified regulatory focus on cross-border transfers to China, but the DPC's statement does not specify any potential remedies or enforcement actions tied to the Shein inquiry. It also does not provide a timeline for the review or detail what specific processing activities will be examined beyond the transfers themselves. The DPC framed the inquiry as a strategic priority, reflecting continued supervisory interest across European authorities.